Loading story…
Apple released 26.6 updates for iOS, iPadOS, macOS Tahoe, watchOS, tvOS, and visionOS, alongside macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 for older Macs. The company said the releases include security fixes, bug fixes, and Spotlight index optimizations intended to prepare devices for the next major OS generation, including iOS 27, iPadOS 27, macOS 27, and visionOS 27. Apple recommended installation through standard software update channels, including System Settings on Macs, Settings on Vision Pro, and the Apple Watch app or on-device settings for watches.
Reporting on Apple’s security notes indicates the updates patch a large volume of flaws: nearly 90 vulnerabilities in iOS and iPadOS, more than 130 and in some reports more than 150 fixes in macOS Tahoe, and more than 80 fixes across tvOS, watchOS, and visionOS. The addressed issues span the kernel, WebKit, Wi‑Fi, Siri, image processing, the App Store, and the Neural Engine. Apple did not say any of the vulnerabilities were actively exploited, but the breadth of the fixes means unpatched devices face increased risk now that the issues are public.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
Coverage on July 27, 2026 reported that Apple’s 26.6 releases addressed nearly 90 vulnerabilities in iOS and iPadOS, more than 130 in macOS Tahoe, and over 80 across tvOS, watchOS, and visionOS. The reports said Apple also released macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8 for older Macs and did not indicate any of the flaws were actively exploited.
Apple released watchOS 26.6 on July 27, 2026 as the sixth update to watchOS 26. Apple said the release includes unspecified bug fixes and security updates.
Apple released macOS Tahoe 26.6 on July 27, 2026 as a small update to macOS Tahoe. Apple said it includes security fixes for Mac systems and Spotlight optimizations ahead of macOS 27.
Apple released iOS 26.6 and iPadOS 26.6 for eligible iPhones and iPads on July 27, 2026. The updates include security fixes and Spotlight index optimizations in preparation for iOS 27 and iPadOS 27.
Apple released visionOS 26.6 on July 27, 2026 for the Vision Pro headset. Apple said the update includes bug fixes, security improvements, and Spotlight index optimizations ahead of visionOS 27.
Apple issued a Safari security update alongside its July 2026 patch cycle for macOS versions earlier than macOS 26. The update applied to older supported macOS releases, while Apple’s other operating system patches focused on current version 26 releases.
Xint disclosed technical details for CVE-2026-64775, a critical Apple kernel memory-initialization flaw with a CVSS score of 9.8 that could let an app trigger unexpected system termination without user interaction. Apple patched the issue in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, visionOS 26.6, and watchOS 26.6.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
29 references tracked. Mallory keeps watching after this page renders.
seclists.org
Open sourcexint.io
Open sourcethezdi.com
Open sourcemalware.news
Open sourcesupport.apple.com
Open sourcesupport.apple.com
Open sourcesupport.apple.com
Open sourcecve.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple released a comprehensive set of security updates for its major operating systems and applications, including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, tvOS 26.1, watchOS 26.1, visionOS 26.1, Safari 26.1, and Xcode 26.1. The updates address 110 vulnerabilities, several of which involve memory corruption issues in components such as ImageIO, FontParser, and WebKit, potentially allowing remote code execution. Other vulnerabilities could allow unauthorized access to sensitive user data through components like Spotlight, CoreMedia, MallocStackLogging, Admin Framework, sudo, Security, SoftwareUpdate, and AppleMobile. None of the vulnerabilities were reported as actively exploited at the time of release, and Apple provided limited technical details in its advisories. Security authorities, including the Canadian Centre for Cyber Security, have urged users and administrators to promptly apply these updates to mitigate potential risks. The updates are considered routine but critical, given the breadth of affected products and the potential impact of the vulnerabilities. Users are advised to review Apple's official security update documentation and ensure all devices are updated to the latest versions to maintain security and privacy protections.
Jun 29, 2026
Apple released broad security updates for its platforms, including **iOS**, **iPadOS**, **macOS Sequoia 15.4**, **Safari**, **tvOS**, and **visionOS**, fixing a total of 213 vulnerabilities. The updates addressed 77 flaws in iOS and iPadOS, 123 in macOS Sequoia, and 13 in Safari, with impact ranging from **sandbox escape** and **privilege escalation to root** to **arbitrary file deletion**, **kernel-level code execution**, and **WebKit memory corruption**. Apple also issued fixes for older supported operating systems, backporting patches for vulnerabilities that had been disclosed and reportedly exploited in recent months, including **`CVE-2025-24200`**, **`CVE-2025-24201`**, and **`CVE-2025-24085`**. The company recommended upgrading devices to at least **iOS 15.8.4, 16.7.11, and 18.4**; **iPadOS 15.8.4, 16.7.11, 17.7.6, and 18.4**; and **macOS Ventura 13.7.5, Sonoma 14.7.5, and Sequoia 15.4** to reduce exposure.
Jul 24, 2026
Apple released a wide-ranging set of security updates across **iOS**, **iPadOS**, **macOS Tahoe**, **watchOS**, **tvOS**, **visionOS**, **Safari**, and **Xcode**, addressing more than 85 vulnerabilities across core components including the kernel, WebKit, AirPlay, Keychain, and open-source libraries. The updates fix issues that could enable traffic interception, kernel state disclosure, user fingerprinting, installed-app enumeration, Mail privacy bypasses, exposure of deleted Notes content, and crashes from out-of-bounds writes. Apple said it had no reports of in-the-wild exploitation for the vulnerabilities listed in the release notes, but urged users to update, with particular importance for older devices and managed macOS environments. Among the patched flaws is **`CVE-2024-27828`**, a high-severity memory-handling bug in **IOSurfaceRoot** that could let a local app trigger a kernel panic or execute arbitrary code with kernel privileges. STAR Labs said the issue stemmed from a reference count leak in `IOSurfaceRootUserClient::s_create_shared_event`, where repeated calls with crafted input could corrupt memory handling; the flaw affected iOS and iPadOS before 17.5, tvOS before 17.5, watchOS before 10.5, and visionOS before 1.2. Apple addressed the bug through improved memory handling, adding it to a broader pattern of fixes spanning both current and legacy Apple platforms.
Jul 1, 2026